What is the difference between the different user roles and permissions in CIM?

ReadOnly – The read only has no edit access in CIM.  This role can access all of the existing modules in a read-only mode, except for the Admin module.  This role can also view reports and dashboards.

Edit – An edit user can access all modules with edit capabilities, except for the Admin module.

Admin – This user has all capabilities of an edit user with some additional abilities.  The Admin module is available to adjust global account settings and attributes including conditions, users, and system data.  Admins are also able to undo checkout of an assessment regardless of who it is checked out to, delete records, undelete records, revert approved records to pending or unapproved, and override a workflow approval for any user.

Forms User – This user can access the CIM forms area and view/edit atmospheric forms.  This user also has read only access to view assessment planning records in CIM.

Forms Admin – This user has all access that a Forms user has, but can also undo a submitted form and bring it back to an editable state.